§01 · Posture
Insurance, Claims & Loss Event · Internal Posture
Internal insurance workspace covering policy inventory, coverage/exclusions, notification triggers, claims workflow, loss event register, incident-to-claim decision tree, and renewal cadence. Compiled from the 30 prior centres and the 21-pack evidence spine. Conservative: nothing here constitutes insurance coverage confirmation, claim acceptance, insurer approval, legal advice, audit opinion, regulator submission, or authorisation for external launch. Coverage determinations are reserved to the insurer.
Bound policies4Cyber · PI/E&O · D&O · Crime
Pending placement2Tech E&O · Business interruption
Open claims0No claims notified in pre-pilot
Loss events YTD21 DR drill · 1 schema-drift triage
Next renewal62 dCyber policy 2026-07-19
§02 · Policy inventory
Bound & Pending Insurance Policies
| ID | Line | Insurer (counsel-redacted) | Bound | Effective | Limit | Deductible | State |
|---|---|---|---|---|---|---|---|
| P-001 | Cyber liability + incident response | [Insurer · redacted] | 2025-07-19 | 2025-07-19 → 2026-07-19 | £X | £Y | Bound |
| P-002 | Professional Indemnity / E&O | [Insurer · redacted] | 2025-09-12 | 2025-09-12 → 2026-09-12 | £X | £Y | Bound |
| P-003 | Directors & Officers (D&O) | [Insurer · redacted] | 2025-09-12 | 2025-09-12 → 2026-09-12 | £X | £Y | Bound |
| P-004 | Crime / Fidelity | [Insurer · redacted] | 2025-09-12 | 2025-09-12 → 2026-09-12 | £X | £Y | Bound |
| P-005 | Technology E&O | [Broker-pending] | — | — | — | — | Pending placement |
| P-006 | Business Interruption | [Broker-pending] | — | — | — | — | Pending placement |
| P-007 | Regulatory investigation cost (assumption) | Sub-limit on D&O | 2025-09-12 | per D&O | Sub-limit | per D&O | Assumption |
Policy numbers, insurer names, and price terms are counsel-redacted in this Centre. Full schedule maintained off-screen with broker + counsel dual-access.
§03 · Coverage & exclusions matrix
Coverage / Exclusions Posture (counsel-curated)
Posture only — not coverage determination. Coverage determinations are reserved to the insurer and subject to policy wording.
| Scenario | Cyber | PI/E&O | D&O | Crime | Tech E&O | BI | Notes |
|---|---|---|---|---|---|---|---|
| Cloud outage · operational | Partial | — | — | — | Gap | Gap | BI + Tech E&O pending placement |
| Data breach · external attacker | Covered (subject to wording) | — | — | — | — | — | Cyber primary |
| Ransomware · payment | Sub-limit, counsel pre-clearance | — | — | — | — | — | Counsel + broker pre-clearance required |
| Wire fraud · social engineering | — | — | — | Sub-limit | — | — | Crime sub-limit, deductible applies |
| Insider fidelity / theft | — | — | — | Covered (subject to wording) | — | — | Crime primary |
| Professional service negligence | — | Covered (subject to wording) | — | — | — | — | PI/E&O primary |
| Tech product / API defect causing client loss | — | Partial | — | — | Gap pending placement | — | Tech E&O pending placement |
| D&O personal exposure | — | — | Covered (subject to wording) | — | — | — | D&O primary |
| Regulatory investigation cost | — | — | D&O sub-limit assumption | — | — | — | Assumption — broker/counsel review |
| MNPI mishandling | Subject to wording | Subject to wording | Subject to wording | — | — | — | Counsel + broker review required |
| Pre-pilot · pre-revenue ops | — | — | — | — | — | BI ineligible | BI ineligible without revenue baseline |
| War / sanctions / fraud (general) | Generally excluded | Standard market exclusions | |||||
§04 · Notification triggers
Insurer Notification Triggers
| Trigger | Policy | SLA | Owner | Counsel-binding | Source centre |
|---|---|---|---|---|---|
| Suspected cyber event · including ransomware | P-001 Cyber | Immediately on detection | SRE + CISO | Yes | Security Operations · Operational Runbooks |
| Data breach involving personal data | P-001 Cyber | Immediately on detection | CISO + Counsel | Yes | Data Governance · Security Operations |
| Allegation / claim · professional services | P-002 PI/E&O | ≤ 5 business days | Counsel | Yes | Client Lifecycle · Stakeholder Rooms |
| Allegation against director / officer | P-003 D&O | ≤ 5 business days | Counsel + Founder | Yes | Legal Entity / Governance Records |
| Regulatory investigation · letter received | P-003 D&O (sub-limit assumption) | Immediately | Counsel + Founder | Yes | Regulatory Escalation · Regulatory Exam Response |
| Suspected internal fraud / theft | P-004 Crime | Immediately on suspicion | CISO + Counsel | Yes | Security Operations · Financial Controls |
| Wire fraud · social engineering | P-004 Crime | Immediately on detection | Finance + CISO | Yes | Financial Controls · Security Operations |
| Operational disruption ≥ Sev-2 | Multiple (P-001/P-005/P-006 when placed) | ≤ 24h | SRE + Counsel | Conditional | Production Monitoring · Operational Runbooks |
§05 · Claims workflow
Claim Notification Workflow
| Step | Action | Owner | Counsel-bound | Audit log |
|---|---|---|---|---|
| 1 · Detect | Source centre raises trigger flag | Source-centre owner | — | logged |
| 2 · Preserve | Preserve logs, evidence, communications (legal hold ready) | Evidence Owner · CISO | Yes | logged |
| 3 · Counsel triage | Counsel reviews privilege, materiality, notification clock | Counsel | Yes | logged |
| 4 · Broker engage | Notify broker; broker engages insurer pre-notification window | Founder · Broker | Yes | logged |
| 5 · Formal notification | Issue notification within policy SLA · in counsel-locked language | Counsel + Founder | Yes | logged |
| 6 · Reservation of rights | Receive insurer reservation-of-rights letter (if any) | Counsel | Yes | logged |
| 7 · Investigation | Internal investigation per Operational Runbooks · regulator/board update | SRE · Counsel · Operations | Yes | logged |
| 8 · Quantification | Quantify loss; cross-link Financial Controls (Capital/Liquidity) | Finance | — | logged |
| 9 · Resolution | Recovery, denial, or partial coverage; document in Loss Register | Counsel + Founder | Yes | logged |
| 10 · Post-mortem | Linked to Operational Runbooks post-mortem and Strategic Risk update | SRE · Risk owner | — | logged |
§06 · Incident-to-claim decision tree
Decision Tree · From Incident to Notification
Q1. Is there an incident classified Sev-2 or worse, OR a written allegation/claim received?
If No → log as Operational Event only · no insurer notification yet.
If Yes → Q2.
If No → log as Operational Event only · no insurer notification yet.
If Yes → Q2.
Q2. Does the event touch a counsel-bound surface (regulator, client material, MNPI, director conduct)?
If Yes → Counsel triage before any external communication. Continue to Q3.
If No → proceed to Q3, counsel briefed retrospectively.
If Yes → Counsel triage before any external communication. Continue to Q3.
If No → proceed to Q3, counsel briefed retrospectively.
Q3. Does the event match a Notification Trigger row (§04)?
If Yes → engage broker per SLA. Continue to Q4.
If No → log internally; revisit at next R&C Committee.
If Yes → engage broker per SLA. Continue to Q4.
If No → log internally; revisit at next R&C Committee.
Q4. Is the relevant policy bound (P-001/P-002/P-003/P-004)?
If Yes → formal notification per Claims Workflow §05.
If No (e.g., Tech E&O / BI pending) → document coverage gap, escalate to Strategic Risk Register and Capital/Liquidity Centre.
If Yes → formal notification per Claims Workflow §05.
If No (e.g., Tech E&O / BI pending) → document coverage gap, escalate to Strategic Risk Register and Capital/Liquidity Centre.
Q5. Has the policy SLA started running?
Track notification clock to insurer; record actual notification date and insurer acknowledgement in Loss Register.
Track notification clock to insurer; record actual notification date and insurer acknowledgement in Loss Register.
Q6. Is regulator notification also required?
If Yes → branch into Regulatory Escalation Centre · counsel-bound language only. Insurer notification does not substitute for regulator notification.
If Yes → branch into Regulatory Escalation Centre · counsel-bound language only. Insurer notification does not substitute for regulator notification.
§07 · Loss event register
Operational Loss Event Register (YTD)
| ID | Date | Class | Event | Sev | Notified? | £ Estimate | Linked centre | State |
|---|---|---|---|---|---|---|---|---|
| LE-2026-001 | 2026-05-15 | Operational / drill | DR drill · cloud region failover | Sev-3 (drill) | No (drill) | £0 · drill | Operational Runbooks & Day-2 Support | Closed |
| LE-2026-002 | 2026-05-12 | Data quality | Schema drift on settlement feed | Sev-3 | No (below threshold) | £0 (no client impact) | Data Governance | Triaged |
| LE-2026-003 | — | — | (no further events YTD) | — | — | — | — | No further events |
§08 · Operational risk event taxonomy
Loss Event Class Taxonomy (Basel-style)
| Class | Subtype | Mapped policy | Linked centre |
|---|---|---|---|
| Internal fraud | Theft, fraud, deliberate mis-statement | P-004 Crime · P-003 D&O | Security Operations · Legal Entity / Governance Records |
| External fraud | External attacker · social engineering · phishing | P-001 Cyber · P-004 Crime | Security Operations |
| Employment practices & workplace safety | (out-of-scope · single-operator) | — | — |
| Clients, products & business practices | Mis-selling · unsuitable advice · MNPI mishandling | P-002 PI/E&O · P-005 Tech E&O (pending) | Client Lifecycle · Conduct Risk MI (planned) · Complaints (planned) |
| Damage to physical assets | (out-of-scope · no physical premises in scope) | — | — |
| Business disruption & system failures | Outage · degraded performance · DR | P-006 BI (pending) · P-001 Cyber (incident-response) | Operational Runbooks · Production Monitoring · Integration / API |
| Execution, delivery & process management | Settlement error · schema drift · vendor failure | P-002 PI/E&O · P-005 Tech E&O (pending) | Data Governance · Vendor Risk · Integration / API |
§09 · Evidence artefact register
Insurance / Claims Evidence Artefacts
| ID | Artefact | Pack | Owner | Retention | Counsel | State |
|---|---|---|---|---|---|---|
| EV-INS-01 | Policy schedule (counsel-redacted) | Outsourcing Concentration · Policy Attestation | Founder + Broker | 10y | Yes | Fresh |
| EV-INS-02 | Broker engagement letter | Outsourcing Concentration | Founder + Counsel | 10y | Yes | Fresh |
| EV-INS-03 | Proposal forms / declarations | Policy Attestation | Founder + Counsel | 10y | Yes | Fresh |
| EV-INS-04 | Loss event register | Incident | Risk owner | 10y | — | Fresh |
| EV-INS-05 | Claim notification template (counsel-locked) | Policy Attestation | Counsel | Permanent | Yes | Drafted |
| EV-INS-06 | Incident-to-claim decision tree | Incident · Policy Attestation | Risk owner + Counsel | 5y | Yes | Drafted |
| EV-INS-07 | Coverage gap analysis (Tech E&O / BI) | Outsourcing Concentration · Capital/Liquidity | Counsel + Finance | 5y | Yes | In review |
| EV-INS-08 | Renewal calendar & cadence | Product Governance | Founder | 5y | — | Fresh |
| EV-INS-09 | Broker / insurer contact register | Outsourcing Concentration | Founder + Counsel | 5y | — | Fresh |
| EV-INS-10 | Claims readiness tabletop log | Incident | SRE + Counsel | 5y | — | Tabletop scheduled |
§10 · Renewal calendar
Renewal Cadence (next 12 months)
| Policy | Renewal date | Pre-renewal window opens | Owner | State |
|---|---|---|---|---|
| P-001 Cyber | 2026-07-19 | 2026-05-19 (T-60d) | Founder + Broker | Window open |
| P-002 PI/E&O | 2026-09-12 | 2026-07-13 (T-60d) | Founder + Broker | Tracking |
| P-003 D&O | 2026-09-12 | 2026-07-13 (T-60d) | Founder + Broker + Counsel | Tracking |
| P-004 Crime | 2026-09-12 | 2026-07-13 (T-60d) | Founder + Broker | Tracking |
| P-005 Tech E&O | (initial placement) | Active | Founder + Broker + Counsel | Pending placement |
| P-006 Business Interruption | (initial placement) | Active | Founder + Broker + Finance | Pending placement |
§11 · Escalation lane
Board / Regulator Escalation Triggers
| Trigger | Route | Counsel-binding | SLA |
|---|---|---|---|
| Any insurer notification issued | Counsel → Founder → R&C Committee → Board | Yes | ≤24h to R&C; next Board cycle |
| Reservation of rights / coverage dispute | Counsel → Founder · escalate to Board + Capital/Liquidity Centre | Yes | ≤72h |
| Claim denied / partial coverage | Counsel + Finance → Board + Strategic Risk Register update | Yes | ≤72h |
| Regulator + insurer parallel engagement | Counsel-locked; both lanes counsel-coordinated | Yes | Per regulator SLA |
| Coverage gap activated by loss event | Founder + Finance → Capital/Liquidity buffer review | Conditional | ≤72h |
| Renewal terms materially worsen | Founder + Counsel + Finance · board narrative update | Conditional | Pre-binding |
§12 · Broker / insurer / counsel contacts
Contacts Posture (counsel-redacted)
| Role | Party (counsel-redacted) | Engagement basis | Last verified | State |
|---|---|---|---|---|
| Broker (primary) | [Broker · redacted] | Broker engagement letter (EV-INS-02) | 2026-05-12 | Active |
| Insurer · Cyber | [Insurer · redacted] | Policy P-001 | 2026-05-12 | Active |
| Insurer · PI/E&O · D&O · Crime | [Insurer · redacted] | Policies P-002 / P-003 / P-004 | 2026-05-12 | Active |
| Counsel · coverage | [Counsel firm · redacted] | MC-003 (Legal Entity Centre) | 2026-05-16 | Active |
| Incident response retainer | [IR vendor · redacted] | Cyber policy panel | 2026-05-12 | On panel |
§13 · Claims readiness checklist
Pre-Incident Claims Readiness
| # | Item | Owner | State |
|---|---|---|---|
| 1 | Counsel-locked notification template ready | Counsel | Drafted |
| 2 | Broker / insurer contacts verified within 30d | Founder | Done |
| 3 | Incident-to-claim decision tree current | Risk owner + Counsel | Current |
| 4 | Loss event register fresh (≤14d) | Risk owner | Fresh |
| 5 | Evidence preservation / legal hold playbook | Evidence Owner + Counsel | Drafted |
| 6 | Claims tabletop drill in last 6 months | SRE + Counsel | Scheduled |
| 7 | Tech E&O placement progressed | Founder + Broker | Pending |
| 8 | Business interruption placement progressed | Founder + Broker + Finance | Pending |
| 9 | Cyber renewal window engaged (T-60d) | Founder + Broker | Open |
| 10 | Sub-limit review (regulatory investigation cost) | Counsel + Broker | In review |
§14 · Stakeholder views
Insurance Briefing Posture
Founder / Admin
Policy inventory, renewal calendar, claims readiness, escalation lane.
Board reviewer
Coverage posture, gaps, renewal narrative, escalation triggers. Non-binding.
Compliance / Legal
Notification clocks, counsel-locked templates, regulator-parallel posture.
Risk / Controls owner
Loss event register, taxonomy, decision tree, evidence preservation.
Finance
Premium / deductible / sub-limit, coverage-gap capital implications.
Operations
Claims workflow, runbook handoffs, tabletop cadence.
Technology / Security
Cyber triggers, IR retainer, breach preservation, log retention.
Evidence Owner
Insurance evidence pack freshness, retention, cross-link integrity.
Broker / Insurer / Counsel
External party view (counsel-curated). Engagement basis logged.
Regulator-review room
Counsel-curated read-only. Not a regulator submission.
Auditor / Assurance reviewer
Engagement-letter gated. Not an audit opinion.
§15 · External bundle gates
External Insurance-Bundle Gates
Currently 2 of 4 met. Mirrors prior centres' posture.
| Gate | Acceptance criterion | Counsel-binding | State |
|---|---|---|---|
| 1 | Counsel-locked language across any external insurance / coverage statement | Yes | Pending |
| 2 | Tech E&O + Business Interruption placements bound (or counsel-countersigned acceptance of gap) | Yes | Not met |
| 3 | All insurance evidence hashed / cross-linked within retention windows | — | Met |
| 4 | Claims tabletop or DR drill rehearsed in last 30 days | — | Met |
§16 · Stale / missing insurance evidence alerts
Stale / Missing Alerts
| ID | Alert | Linked artefact | Owner | Age (d) | State |
|---|---|---|---|---|---|
| AL-01 | Tech E&O placement open | P-005 | Founder + Broker + Counsel | 30+ | Pending |
| AL-02 | Business Interruption placement open | P-006 | Founder + Broker + Finance | 30+ | Pending |
| AL-03 | Regulatory investigation sub-limit assumption pending broker/counsel review | P-007 | Counsel + Broker | 14 | In review |
| AL-04 | Coverage gap analysis (EV-INS-07) counsel-pending | EV-INS-07 | Counsel + Finance | 9 | In review |
| AL-05 | Claims tabletop drill scheduled but not yet run | EV-INS-10 | SRE + Counsel | — | Scheduled |
| AL-06 | Cyber renewal window open · T-60d | P-001 | Founder + Broker | — | Open |
| AL-07 | Evidence-preservation / legal-hold playbook draft | RC-05 | Evidence Owner + Counsel | — | Drafted |
§17 · Acceptance criteria
Centre Acceptance Criteria
- Every policy row names line, bound/pending state, effective window, limit/deductible posture, and counsel/broker state.
- Every coverage row tags each policy column as covered / partial / sub-limit / gap and notes the wording reservation.
- Every notification trigger names policy, SLA, owner, counsel-binding flag, and source centre.
- Every claims-workflow step names owner, counsel-binding flag, and audit-log status.
- Every loss event names date, class (Basel-style), severity, notification state, £ estimate, linked centre, and state.
- Every evidence artefact traces to a 21-spine pack, owner, retention window, and counsel-binding flag.
- External-facing insurance language remains counsel-locked. Coverage determinations are reserved to the insurer.
§18 · Audit trail
Insurance Centre Audit Events (last 10)
| Event | When | Actor | Centre | Pack |
|---|---|---|---|---|
| Insurance dashboard rendered | 2026-05-18T07:30Z | founder-admin | Insurance, Claims & Loss Event | — |
| Renewal calendar refreshed | 2026-05-18T07:31Z | system | Product Governance | Product Governance |
| Loss register cross-linked to Strategic Risk Register | 2026-05-18T07:32Z | system | Strategic Risk Register | Incident |
| DR drill log cross-linked to LE-2026-001 | 2026-05-18T07:34Z | SRE | Operational Runbooks & Day-2 Support | Incident |
| Schema-drift event cross-linked to LE-2026-002 | 2026-05-18T07:36Z | Evidence Owner | Data Governance | Settlement |
| Cyber renewal window opened (T-60d) | 2026-05-18T07:38Z | system | Insurance, Claims & Loss Event | — |
| Tech E&O placement broker-pending reminder | 2026-05-18T07:40Z | system | Vendor Risk | Outsourcing Concentration |
| BI placement broker-pending reminder | 2026-05-18T07:42Z | system | Capital, Liquidity & Prudential Readiness | Capital/Liquidity |
| Coverage gap analysis counsel-pending | 2026-05-18T07:45Z | counsel | Policy / Control Library | Policy Attestation |
| External-bundle gate state sealed | 2026-05-18T07:48Z | counsel | Production Go/No-Go | Activity Perimeter |
§19 · Conservative limitations
What this Centre is NOT
- Not legal advice. Counsel countersign is the binding signal for any external-facing insurance / coverage language.
- Not insurance coverage confirmation. Coverage determinations are reserved to the insurer and subject to policy wording.
- Not claim acceptance, insurer approval, or admission of liability.
- Not financial advice. Premium / sub-limit / deductible information is internal posture only.
- Not regulator approval, registration, licensing, or supervisory acceptance.
- Not certification or accreditation of any insurance framework.
- Not an audit opinion. Auditor engagement letter remains unsigned.
- Not a regulator submission. Regulator-room view is counsel-curated and read-only.
- Not client acceptance. Pre-pilot posture.
- Not authorization for external launch. External bundle gates 1 and 2 not yet met.